Rock rock

0 Followers · 0 Following

• Joined on 2026-07-25

Repositories

2

Projects

1

Packages Public Activity Starred Repositories

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 18:20:37 +00:00

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 18:20:23 +00:00

4953580a8d test: real integration tests calling actual service operations

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 18:17:54 +00:00

a8d8b17a03 test: add integration test suite + canary deployment script

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 18:16:42 +00:00

8dfd17127b chore: remove unused internal/auth package

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 18:16:17 +00:00

139bc80529 refactor: dispatcher as dumb pipe + add gRPC detection for Temporal

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 18:11:39 +00:00

57d64039d5 config: set memory to public (no JWT required), only iam protected

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 18:07:24 +00:00

df33203a72 feat: add JWT validation against Authentik JWKS for protected adapters

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 16:48:48 +00:00

46dc24a26c fix: remove workflow adapter (temporal-frontend is gRPC-only, not HTTP)

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 16:07:15 +00:00

e7536a80ce fix: correct SQS port from 8080 to 9090

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 16:04:01 +00:00

f4193fe6e1 fix: correct service names in adapter upstreams (management-service.sqs, minio.storage, authentik-server.iam)

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 15:55:43 +00:00

bd4cbbd0a3 feat: proxy requests to service adapter upstreams instead of echoing

rock pushed to main at riotpiao-poimen/homelab 2026-08-27 02:51:12 +00:00

f2609037fa feat: add ServiceAccounts for poimen-memory/kmsvc/immich operator Roles

e00f1d39ca feat: add vault-service-api group for non-human Vault access

Compare 2 commits »

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-27 02:49:12 +00:00

50503445f7 fix: add serviceaccount manifest (was in deleted rbac.yaml)

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-26 23:47:17 +00:00

62e23d6876 chore: remove CRD, RBAC, and CR manifests (adapters now in ConfigMap)

rock pushed to main at riotpiao-poimen/homelab 2026-08-26 23:42:47 +00:00

ecd8c52b69 feat: add Vault as an Authentik OIDC app for human/CLI login

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-26 23:41:46 +00:00

81e228e818 feat: add stakater reloader annotation for configmap auto-reload

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-26 23:39:35 +00:00

9c5fb0ce84 feat: load service adapters from ConfigMap, remove k8s API dependency

rock pushed to main at riotpiao-poimen/homelab 2026-08-26 23:33:37 +00:00

963d4c13a2 fix: rotate vault unseal keys after vault-0 wipe/reinit

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-26 23:24:46 +00:00

977058d0b0 fix: route k8s API through nginx proxy, drop CiliumNetworkPolicy

rock pushed to main at riotpiao-poimen/homelab-frontend 2026-08-26 23:22:00 +00:00

d51b99add3 fix: use CiliumNetworkPolicy for kube-apiserver egress